Security Advisory

CVE-2026-3116

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-26 16:19:32
Last updated 2026-03-26 17:51:14
Assigner Mattermost
State PUBLISHED

Description

Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589